Chinese Ebook Downloader

Key points before you install/use: - Functional fit: The skill appears to do what it claims (automated ebook search/download + conversion). The included scripts perform browser automation, decrypt file-host pages, call APIs, and download files. - Missing/declarative mismatches: The registry says 'no required binaries' but the code needs: Playwright (and a browser runtime), Python packages (playwright, ebooklib, weasyprint), system tools (curl, unzip, file), and CJK fonts. Several scripts contain a hard-coded Python interpreter path (/opt/homebrew/...), which will likely fail on other systems. Expect to manually install dependencies and edit paths. - Security surface: The automation executes JavaScript extracted from third-party pages (page.evaluate), launches headless browsers, and executes shell commands (curl, unzip, subprocess.run). That is expected for this downloader but increases risk: a malicious or compromised download page could trigger unexpected network requests or server‑side interactions. To reduce risk, run this skill only in an isolated environment (container, VM, or dedicated machine), review the code paths that call page.evaluate and subprocess.run, and avoid running with elevated privileges. - Legal and policy: The skill is designed to retrieve ebooks from sites and file hosts (including Anna's Archive/libgen mirrors). That may conflict with copyright law or your organization's acceptable-use policy. Confirm legality and policy compliance before using. - Practical recommendations: - Install and test dependencies in a sandbox (virtualenv/conda, container). Follow README for Playwright setup. - Replace or remove hard-coded PYTHON paths and verify environment values (SOURCE_* variables) point to expected hosts. - Inspect and, if desired, restrict network access for the process (e.g., block outbound except to known sources) when testing. - If you want to use it as an OpenClaw skill, add an explicit install step and declare required binaries and env vars so the runtime can validate prerequisites. If you want, I can: list the exact files/lines that reference hard-coded paths and subprocess calls, extract all external hostnames the code references, or generate a minimal checklist of the packages/commands to install to run this safely in a container.